Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Windows Update redirects to Google English

Feb 8, 2009 2:45PM PST

I have done all of the following...............

Please disconnect all of your computers from your network, then follow the instructions below on ALL of the connected computers:

Look for the file below and if there...:

C:/Windows/system32/wdmaud.sys

Delete it (or move/rename) and Reboot.

Next,
1.click start-->run-->devmgmt.msc-->ok
2.on the device manager, click view-->select show hidden devices/drivers.
3. then click on "non plug and play drivers/devices", and find TDssserv.sys
4. right click it, then select disable, then restart the computer.
5. then check if the problem still persists. good luck!

Next, On a friend or family member's computer, download the Malwarebytes installer and update files from the links below, copy them to a CD or flash drive, then transfer the files to the problem machines and use them.. I use the sites below to download the installer file and the manual updater:

Once downloaded and before transferring them to the problem machine, rename the program installer "mbam-setup.exe" file to something else like "Gogetum.exe", then copy the installer file and the update file to a CD or flash drive.. Transfer the file to the problem machine, then install the "Gogetum.exe" file, then run the update to get the program current.. After that, run a full system scan and delete anything it finds.

Malwarebytes Installer Download Link (Clicking on the links below will immediately start the download dialogue window.)
http://www.besttechie.net/tools/mbam-setup.exe

Malwarebytes Manual Updater link
http://www.malwarebytes.org/mbam/database/mbam-rules.exe

Next, download the SuperAntispyware program and the manual updater from the links below. After running the Malwarebytes tool above, if you still can't download and install it directly from the problem machine, download it on a friend or family member's computer as well.:

SuperAntispyware
http://www.superantispyware.com/

SuperAntispyware Manual Updater
http://www.superantispyware.com/definitions.html

In a few situations, in order for the program to run, it was also necessary to rename the main "mbam.exe" file also after installing it.. It resides in the C:\Programs Files\Malwarebytes Antimalware folder.


THIS IS WHAT HAPPENED...

I tried all you said wdmaud wouldn't let me delete it so I renamed it instead.

I couldn't find TDssserv.sys on any of the machines

I downloaded Malwarebytes and the updater and run those, but they found nothing, I then ran Super Antispyware again nothing found.

You were right it wouldn't let me update either programs.

So whilst I still had the 2 PC's and laptop unplugged from the internet I used wipe drive on all 3 machines and wiped them clean of everything and reinstalled Windows XP simultaneously, to my horror when I connected everything back up, exactly the same thing has happen on both PC's and Laptop, won't update Malwarebytes etc and redirects Windows Update to Google English.

I also installed Kaspersky 2009 on all machines, but none of them will update Kaspersky, so I am now without anti virus/firewall.

Please can anyone help as all the above took me 9 1/2 hours and I am back to square one!

Thanks

Discussion is locked

- Collapse -
Please Stick To One Thread
Feb 10, 2009 8:06AM PST

If you repost in another thread, we can't keep track of your answers.. If you need to reply, simply click on the "Reply" button and post it.. The thread will then pop to the top.

In order to delete the "wdmaud.sys" file, make sure the file is EXACTLY where I've stated.. There is a legitimate "wdmaud.sys" file but it resides in a different directory.. So, if you've verified the file is the "bad" one, then please restart the computer into into Safe Mode, using the link below:

How To Start In 'Safe Mode'

Once in Safe Mode, navigate to the file and delete it normally. If it still won't delete, then use a command prompt to delete the file while in Safe Mode. (Click on Start-Run, type: cmd, then press the "Enter" key.. When the command window opens, type:

C:\Windows\System32
Then press the "Enter" key..

You should now see:
C:\WINDOWS\System32>

At the flashing cursor, type:
del wdmaud.sys

So it should now look like this:
C:\WINDOWS\System32>del wdmaud.sys

Then press the "Enter" key. As long as there are no error messages, the file will be deleted.. Close the command window, then restart the computer.

Hope this helps.

Grif

- Collapse -
Locking This One So Discussion Can Continue Elsewhere
Feb 10, 2009 8:08AM PST